Attributed metadata history
Up to 100 retained publisher events per page for 4c24d935a79e3d06b7fccbceb61c28bb999c10600a9f60d870ef4ff232bcd3c4. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_2009f6680f46118c1b
observed · 2026-10-12 07:28:02 UTC
available
Fingerprint: 0770f7f331815970c09d7c7df4c1b4100c1c363dd891c2cad4eeab14d5b30017
intelligence_src_2009f6680f46118c1b
observed · 2026-10-12 07:28:02 UTC
New Rules new: Axios NPM Compromise File Creation Indicators - Linux new: Axios NPM Compromise File Creation Indicators - MacOS new: Axios NPM Compromise File Creation Indicators - Windows new: Axios NPM Compromise Indicators - Linux new: Axios NPM Compromise Indicators - MacOS new: Axios NPM Compromise Indicators - Windows new: Axios NPM Compromise Malicious C2 Domain DNS Query new: Azure Sign-In With Axios User Agent new: Cisco Dot1x Disabled new: DMSA Link Attributes Modified new: DMSA Service Account Created in Specific OUs - PowerShell new: Google Workspace Government Attack Warning new: Google Workspace Out Of Domain Email Forwarding new: HackTool - NetExec File Indicators new: Hacktool - NetExec Execution new: Inbox Rules Creation Or Update Activity Via ExchangePowerShell Cmdlet new: Inbox Rules Creation Or Update Activity in O365 new: Indirect Command Execution via SFTP ProxyCommand new: Kubernetes Potential Enumeration Activity new: LiteLLM / TeamPCP Supply Chain Attack Indicators new: Mail Forwarding/Redirecting Activity Via ExchangePowerShell Cmdlet new: New DMSA Service Account Created in Specific OUs new: New MsDS-DelegatedManagedServiceAccount (DMSA) Object Created n
Fingerprint: 6fda3ff7a633225e2ceb6deb842e7500b705730e5fdfe999800497b3a23cd5cf